Analysis Date2015-05-18 13:01:42
MD5df8329abf4d601b9f99405e380b2a259
SHA1d335a836ed3abf023f82cfc30414fb68f2b85f87

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 2ff68b81b488fa4eb1b3146d74949b84 sha1: b5f9f61fa6c27b84cbc62282e4e1f4167fdae4cf size: 198144
Section.rdata md5: 2a912fa1c6b558fa396d7e29e4a84543 sha1: a8485a278cede527d665483a02a4df30cbc20a94 size: 53760
Section.data md5: 3297f1bd473514ac58df3950ed55d930 sha1: 42bc09e0293aa4191c02505767dbb8cede5ac7f5 size: 7168
Section.reloc md5: 337ea22abcad2ace438744d373834dc6 sha1: 35fb09e0de26731891f29a0642931b11c4722294 size: 14848
Timestamp2015-04-29 18:53:56
PackerMicrosoft Visual C++ 8
PEhashb1529dcd7f308076ddd40796194124737919f999
IMPhash3225206cca8161d7fb098931efcb3d83

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\lkujqnexkuar\ookwb1kj5dwhdclaaiz1fq.exe
Creates FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates FileC:\lkujqnexkuar\xdhfsofzri
Deletes FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates ProcessC:\lkujqnexkuar\ookwb1kj5dwhdclaaiz1fq.exe

Process
↳ C:\lkujqnexkuar\ookwb1kj5dwhdclaaiz1fq.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Cryptographic Propagation Application Windows ➝
C:\lkujqnexkuar\ggwzprd.exe
Creates FilePIPE\lsarpc
Creates FileC:\lkujqnexkuar\jw11zfu
Creates FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates FileC:\lkujqnexkuar\ggwzprd.exe
Creates FileC:\lkujqnexkuar\xdhfsofzri
Deletes FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates ProcessC:\lkujqnexkuar\ggwzprd.exe
Creates ServiceManager Filtering SPP HomeGroup - C:\lkujqnexkuar\ggwzprd.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 804

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates Filepipe\PCHFaultRepExecPipe

Process
↳ Pid 1204

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1864

Process
↳ Pid 1160

Process
↳ C:\lkujqnexkuar\ggwzprd.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\lkujqnexkuar\pbq6dbkcozeu
Creates File\Device\Afd\Endpoint
Creates FileC:\lkujqnexkuar\jw11zfu
Creates FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates FileC:\lkujqnexkuar\ssmqakzowwe.exe
Creates FileC:\lkujqnexkuar\xdhfsofzri
Deletes FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates Processyskvkldn2sdg "c:\lkujqnexkuar\ggwzprd.exe"

Process
↳ C:\lkujqnexkuar\ggwzprd.exe

Creates FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates FileC:\lkujqnexkuar\xdhfsofzri
Deletes FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri

Process
↳ yskvkldn2sdg "c:\lkujqnexkuar\ggwzprd.exe"

Creates FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri
Creates FileC:\lkujqnexkuar\xdhfsofzri
Deletes FileC:\WINDOWS\lkujqnexkuar\xdhfsofzri

Network Details:

DNSnightschool.net
Type: A
50.63.202.104
DNSmelbourneit.hotkeysparking.com
Type: A
8.5.1.16
DNScaptainschool.net
Type: A
208.109.181.46
DNStradeschool.net
Type: A
107.20.199.124
DNSbetterschool.net
Type: A
66.147.244.119
DNSgatherschool.net
Type: A
95.211.230.75
DNSflierschool.net
Type: A
95.211.230.75
DNSbreadquestion.net
Type: A
208.91.197.241
DNSseasonquestion.net
Type: A
208.91.197.241
DNSagainsthunger.net
Type: A
184.168.221.29
DNSnightstorm.net
Type: A
31.170.162.218
DNSagainstwhile.net
Type: A
DNSdoubtwhile.net
Type: A
DNSagainstquestion.net
Type: A
DNSdoubtquestion.net
Type: A
DNSagainsttherefore.net
Type: A
DNSdoubttherefore.net
Type: A
DNSdecideschool.net
Type: A
DNSnightwhile.net
Type: A
DNSdecidewhile.net
Type: A
DNSnightquestion.net
Type: A
DNSdecidequestion.net
Type: A
DNSnighttherefore.net
Type: A
DNSdecidetherefore.net
Type: A
DNSlargeschool.net
Type: A
DNSlargewhile.net
Type: A
DNScaptainwhile.net
Type: A
DNSlargequestion.net
Type: A
DNScaptainquestion.net
Type: A
DNSlargetherefore.net
Type: A
DNScaptaintherefore.net
Type: A
DNSrecordschool.net
Type: A
DNSelectricschool.net
Type: A
DNSrecordwhile.net
Type: A
DNSelectricwhile.net
Type: A
DNSrecordquestion.net
Type: A
DNSelectricquestion.net
Type: A
DNSrecordtherefore.net
Type: A
DNSelectrictherefore.net
Type: A
DNSstreetschool.net
Type: A
DNSstreetwhile.net
Type: A
DNStradewhile.net
Type: A
DNSstreetquestion.net
Type: A
DNStradequestion.net
Type: A
DNSstreettherefore.net
Type: A
DNStradetherefore.net
Type: A
DNSbetterwhile.net
Type: A
DNSgatherwhile.net
Type: A
DNSbetterquestion.net
Type: A
DNSgatherquestion.net
Type: A
DNSbettertherefore.net
Type: A
DNSgathertherefore.net
Type: A
DNSbreadschool.net
Type: A
DNSflierwhile.net
Type: A
DNSbreadwhile.net
Type: A
DNSflierquestion.net
Type: A
DNSfliertherefore.net
Type: A
DNSbreadtherefore.net
Type: A
DNSquietschool.net
Type: A
DNSseasonschool.net
Type: A
DNSquietwhile.net
Type: A
DNSseasonwhile.net
Type: A
DNSquietquestion.net
Type: A
DNSquiettherefore.net
Type: A
DNSseasontherefore.net
Type: A
DNSdoubthunger.net
Type: A
DNSagainsttraining.net
Type: A
DNSdoubttraining.net
Type: A
DNSagainststorm.net
Type: A
DNSdoubtstorm.net
Type: A
DNSagainstthrown.net
Type: A
DNSdoubtthrown.net
Type: A
DNSnighthunger.net
Type: A
DNSdecidehunger.net
Type: A
DNSnighttraining.net
Type: A
DNSdecidetraining.net
Type: A
DNSdecidestorm.net
Type: A
DNSnightthrown.net
Type: A
DNSdecidethrown.net
Type: A
DNSlargehunger.net
Type: A
DNScaptainhunger.net
Type: A
DNSlargetraining.net
Type: A
DNScaptaintraining.net
Type: A
DNSlargestorm.net
Type: A
DNScaptainstorm.net
Type: A
DNSlargethrown.net
Type: A
HTTP GEThttp://nightschool.net/index.php
User-Agent:
HTTP GEThttp://decidequestion.net/index.php
User-Agent:
HTTP GEThttp://captainschool.net/index.php
User-Agent:
HTTP GEThttp://tradeschool.net/index.php
User-Agent:
HTTP GEThttp://betterschool.net/index.php
User-Agent:
HTTP GEThttp://gatherschool.net/index.php
User-Agent:
HTTP GEThttp://flierschool.net/index.php
User-Agent:
HTTP GEThttp://breadquestion.net/index.php
User-Agent:
HTTP GEThttp://seasonquestion.net/index.php
User-Agent:
HTTP GEThttp://againsthunger.net/index.php
User-Agent:
HTTP GEThttp://nightstorm.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 50.63.202.104:80
Flows TCP192.168.1.1:1032 ➝ 8.5.1.16:80
Flows TCP192.168.1.1:1033 ➝ 208.109.181.46:80
Flows TCP192.168.1.1:1034 ➝ 107.20.199.124:80
Flows TCP192.168.1.1:1035 ➝ 66.147.244.119:80
Flows TCP192.168.1.1:1036 ➝ 95.211.230.75:80
Flows TCP192.168.1.1:1037 ➝ 95.211.230.75:80
Flows TCP192.168.1.1:1038 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1039 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1040 ➝ 184.168.221.29:80
Flows TCP192.168.1.1:1041 ➝ 31.170.162.218:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206e   : close..Host: n
0x00000040 (00064)   69676874 7363686f 6f6c2e6e 65740d0a   ightschool.net..
0x00000050 (00080)   0d0a                                  ..

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2064   : close..Host: d
0x00000040 (00064)   65636964 65717565 7374696f 6e2e6e65   ecidequestion.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2063   : close..Host: c
0x00000040 (00064)   61707461 696e7363 686f6f6c 2e6e6574   aptainschool.net
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   72616465 7363686f 6f6c2e6e 65740d0a   radeschool.net..
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   65747465 72736368 6f6f6c2e 6e65740d   etterschool.net.
0x00000050 (00080)   0a0d0a0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   61746865 72736368 6f6f6c2e 6e65740d   atherschool.net.
0x00000050 (00080)   0a0d0a0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2066   : close..Host: f
0x00000040 (00064)   6c696572 7363686f 6f6c2e6e 65740d0a   lierschool.net..
0x00000050 (00080)   0d0a0a0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   72656164 71756573 74696f6e 2e6e6574   readquestion.net
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2073   : close..Host: s
0x00000040 (00064)   6561736f 6e717565 7374696f 6e2e6e65   easonquestion.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2061   : close..Host: a
0x00000040 (00064)   6761696e 73746875 6e676572 2e6e6574   gainsthunger.net
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206e   : close..Host: n
0x00000040 (00064)   69676874 73746f72 6d2e6e65 740d0a0d   ightstorm.net...
0x00000050 (00080)   0a0a0d0a 0a                           .....


Strings
v
El2WeC
SSe
"
 
\
.
 
\
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-h
. ,@
..
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
<&<.<?<
>$>@>`>
                          
;&;-;~;
; ;$;(;,;0;
0"0(0:0
0 0(00080@0H0P0X0`0h0p0x0
0'0/0>0D0L0V0\0h0x0
0 0(0?0E0K0U0]0e0m0
000]0j0
0 0$0(0r0x0|0
0#0+03080M0S0Y0a0q0
0&0.060I0
0!0+0A0K0c0s0
0!0@0H0a0r0z0
0#0@0j0w0
0/070G0N0i0u0
0(080?0Y0g0
0$0c0h0q0v0
	0-0d1j1
0(0H0T0p0|0
0`0n0v0~0
0!0U0d0
0$1)1B1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
020:0B0J0P0j0z0
040:0S0a0z0
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
: :0:4:8:@:X:h:l:|:
:#:+:0:6:>:C:I:Q:V:\:d:i:o:w:|:
-070V0
081>1E1
;(;0;8;@;H;P;X;`;
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
? ?(?0?8?@?H?P?X?`?h?p?x?
<0<;<D<W<]<c<q<y<
>0>f>m>|>
 0G0O0\0d0p0
=	>">0>G>R>Z>b>l>v>
=0=H=M=S=\=
:0:P:h:
=&=0=S=v=~=
<*=0=U=j=
0X0`0y0
1 1(10181@1H1P1X1`1h1p1x1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
111@1K1_1g1l1t1
1!1)14191A1I1T1p1x1
1 1$1E1o1
1#1>1E1O1t1
1&1.1H1g1|1
1&1@1K1f1
1-131:1j1r1z1
1!13191D1M1Z1b1o1
1!141I1O1a1f1n1
1"161]1b1
1)1a1i1p1
1=1E1b1i1u1
1)1E1R1g1%252H2`2s2
1!1G1L1Z1`1s1y1
1 1L1U1a1
1'1n1v1
1%1T1_1u1~1
1#2+252P2
1,262@2H2P2l2t2
1-282R2j2u2
1*2N2`2
171@1G1h1
?&?1?7?H?U?[?a?z?
181H1l1x1
182D2P2_2j2
=1>8>Y>_>
>1>9>A>I>e>w>
>!>)>1>9>D>T>`>i>o>u>}>
?1?<?A?z?
\1b1l1
1c2w2Q3
<1=>=\=d=l=
1I1S1X1`1l1s1
1#QNAN
:+:1:R:X:
1#SNAN
>1?T?s?
?1?@?W?h?r?z?
:#:1:\:y:
1Z2v2~2
2*212N4
2 2(20282@2H2P2X2
2	2 202D2P2W2]2p2w2
2'2/2[2|2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2"2*22272?2K2d2l2t2|2
2$2+2>2F2Q2
2 2<2@2P2t2
2 2&2@2T2`2m2~2
2"2/292D2L2_2i2r2
2*2;2C2O2c2k2s2
2&2:2D2f2r2z2
2(2?2N2n2
223:3C3M3d3n3
223>3F3h3
2(262O2V2
2>2F2N2[2c2
2:2J2f2m2x2
2"2Y2`2
2.363B3Q3
2*3W3q3
;';2;9;A;O;h;v;
>%>2><>b>
=&=2=E=R=j=
:&:,:2:::@:F:N:W:^:f:o:
>">*>2>?>H>h>y>
<(<2<<<L<T<Z<d<n<
:#:2:N:i:q:}:
303P3p3
3%313@3F3w3
3#3*323E3Q3`3v3
3#3+3;3z3
3!3=3E3M3Z3w3
3:3?3G3Z3k3q3x3
3"3:3i3t3|3
3$343<3D3L3T3c3k3w3
3+363B3J3
3-383H3[3c3k3u3}3
3*393I3P3V3h3|3
3+3D3R3]3
3?3G3c3p3
3&3T3k3
3)3X3`3q3
3)4;4C4K4
3.454D4M4j4|4
3(6B6O6{6
383<3P3
385B5H5\5h5
393G3^3x3
3A4K4U4h4o4u4
>!>'>3>=>C>N>T>[>s>{>
=3=D=U=b=z=
>&>3>f>v>
3H4a4g4
>3>>>J>]>
?&?.?3?L?W?_?g?o?w?}?
3V4#5R5[5
405F5P5c5
415@5G5f5
4181<1@1
434:4?4L4e4p4
4!414A4
4!4(404<4D4L4U4]4i4o4
4!4)41474?4E4K4Q4^4s4y4
4!4%4)4-414c4
4$4,444<4D4L4T4\4d4l4t4|4
4(464C4M4[4j4q4
4.494J4t4
4$4M4Z4g4t4
4+4Z4z4
454F4z465L5X5m5u5}5
4;5C5W5g5s5
474E4R4\4j4t4~4
484X4x4
:4:B:b:h:o:|:
4D4T4w4
;4=<=D=L=T=\=d=l=t=|=
:$:,:4:<:D:L:T:\:d:l:t:|:
4E6c6|6
4F4O4W4
;$;,;4;<;@;H;P;X;`;h;p;x;
?$?,?4?<?H?r?
<%<4<<<H<U<]<e<q<y<
=4>I>a>~>
<-<4<j<
4N4]4u4%5-5=5H5R5Z5m5u5
4Nu!aw
=&=4=<=_=o=~=
4Y4l4u4
50565;5
515:5M5U5p5|5
525@5Y5g5s5
5&515=5V5d5q5
5*525:5B5J5R5^5f5
5$545X5o5w5
5$5*505:5D5N5S5`5g5q5
5!5)515F5Q5l5r5x5
5$5,545<5D5L5T5\5d5l5t5|5
5'5-545G5V5c5
5#5=5\5|5
5 5'5.555<5C5J5Q5Y5a5i5u5~5
5#555G5f5x5
5#5/5;5H5U5a5i5t5
5.5<5N5V5^5f5k5
5$5\5q5
556B6[6h6
5<5D5L5[5c5}5
5;5F5L5^5h5q5
5)5K5V5c5k5s5{5
5:6c6}6
5'6M6y6
5-7H7`7g7
=+=5=C=\=f=
>->5>=>C>L>s>
5e}N+q
<5<=<E<T<\<
:5:G:Z:l:{:
;(;.;5;@;H;T;k;t;{;
5I6Q6Y6^6i6
5iHyApQZ
<!<-<5<<<I<k<w<
;%;5;@;j;r;
?5?J?T?h?
5M5`5f5}5
;	; ;+;5;@;P;X;c;
;';/;5;;;r;z;
5Y5a5}5
>!>5>Z>t>|>
606i6z6
6'626}6
6#626H6X6h6p6|6
6/646F6U6a6i6q6w6}6
6$6,646<6D6L6T6\6d6l6t6|6
6#6+6:6@6M6X6c6
6"6.696`6
6"6-696s6
6$6,6G6O6W6_6i6s6}6
6#6:6w6
667F7v7~7
6/6E6_6{6
6$6K6^6
6.6Q6i6n6
6.767I7T7Y7i7u7z7
6a7s7{7
;!;6;;;A;q;
6C6R6j6r6x6
:&:6:=:E:R:\:x:
=.=6===E=S=k=y=
?#?6?F?N?[?c?k?s?
;,;6;>;F;N;S;s;{;
:6:F:U:d:v:
?!?-?6?H?P?_?v?
6I6c6o6|6
6S7d7u7
6X7k7r7|7
;-;6;Z;s;
70767K7]7x7
7)717D7S7Z7z7
7+737?7
7*767z7
7$7,747<7D7L7T7\7d7l7t7|7
7 7(747;7I7Q7[7{7
7&7.767=7E7L7z7
7&7,7<7D7J7Y7c7i7x7
777@7L7
7#7+7;7N7V7^7f7
7 7$7(7r7x7|7
7#7+7e7j7
7'7/7I7]7
7/7=7V7d7}7
7%787O7X7z7
7/7A7M7U7]7o7
7*7I7Q7]7e7y7
7)838Q8
7"8-858F8[8l8t8|8
788{85:
7%8?8H8l8n9w9
7!8Y8N9n9
>*>7>[>9???H?[?a?
7E7X7`7h7p7
=/=7=?=G=O=W=e=|=
<+<7<G<Q<Y<
;7;gtJ
>->7>?>I>O>k>u>{>
?7?P?a?n?u?
>)>8>]>
879W9e9m9}9
8!80888F8L8T8^8j8
8)81898A8
8%81898A8I8Q8
8%82898T8a8h8w8
8+848<8U8`8p8y8
8"8*828=8I8S8k8r8
8	8!848:8@8G8P8U8[8c8h8n8v8{8
8$8,848<8D8L8T8\8d8l8|8
8$8,848<8D8L8T8\8d8l8t8|8
8!8-84898A8I8T8o8|8
888B8I8w8
8,8:8c8
8-8=8C8R8_8d8t8|8
8 8$8E8o8
8#8>8i8
8%8*8M8g8r8y8
8.8m8}8
8>8o8w8
8$919?9H9U9`9h9m9u9
8*9/9Q9W9d9
8"9<9U9c9
8%9Q9a9
8+9Q9k9{9
8&9X9`9l9|9
8a8u8~8
8d9h9n9r9
<$<(<8<<<@<D<L<d<t<x<
>$>->8>D>R>`>t>|>
?"?*?8?@?e?q?y?
8f9n9v9
8g;O<Z<j<
<%<8<H<N<[<b<~<
;8<H<P<X<s<
8l9+:,;<;M;U;e;v;
8)N,f2N
;#;8;z;#<.<B<l<u<
>->9>^>
90959A9F9e9
9%:2:=:g:
`98Ap<
9#909F9R9Z9g9o9{9
9(959=9I9Z9z9
9.969G9T9\9d9p9{9
9#979A9Q9\9u9}9
9$9,949<9D9L9T9\9d9l9t9|9
9'9/979[9n9
9!9&9,94999?9G9L9R9Z9_9d9m9r9x9
9$9/9c9k9v9
9*9/9I9^9j9z9
999I9a9
9-9;9T9b9{9
9$9?9u9z9
<9<D<I<Q<x<
9E<X<m<
? ?9?G?c?q?|?
;9=G=Q=
=9=H=Y=o=
9I:S:`:h:p:x:
?9?I?Y?g?o?v?~?
:);9;J;c;m;y;
9J;[;j<|<
9Y:`:j:r:
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
?.?A?F?N?b?k?x?
<.<:<A<H<c<m<
already connected
already_connected
A#""M@
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
:-:<:B:H:c:s:{:
:b:j:r:
;b<q<y<
broken pipe
Bs\=1@
> >:>B>\>v>~>
bWWWWj
CallWindowProcA
__cdecl
CheckDlgButton
=>>C>I>P>
;.;C;J;b;i;v;
:C;J;R;
<;<C<K<^<h<
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
:$:.:c:o:
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
D_:,=2
d2h2l2p2t2x2|2
~d5dz4
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
?(?D?H?h?
directory not empty
=D=L=T=X=`=t=|=
?.?<?D?L?u?
=/=<=D=N=T=\=a=
DrawTextA
dsgel boisijo sauaqpi wfce ocsgu csemucsm cnbufefuva nbcozx ivtu iupiglot golcu aqobg hmdinb bojye mbtejdnipw gaji nunmelyh tod nmnotbure wcsa gunpu dtbevax ggduz ensduwoobc dwben taubiel ezroubodi dmloblgeij xdto dlwul kiuuseloat jnsoazy nldihqf rqcibgul bydaad mooljodnw fdleqpsif yppudebfa tjlainbjul yrdamapra brmapitju tpiwav pife aseszaiss wcnadjdan ljdebgg vddaj jasdi kckems kcror bjepodoj fznobvv pbpolrdi fsn imybopd tsfoicdva spsitluja crvorivlao vroz jnmoeugu zmnopcponj ajzso gufmarcz uanpriyugp xmc omf zarjelr ufm lbdollki aigate ebjudim htpiih czgofjy tgqoqdpont ugfluxfm ppg nmul mxuupe lyhunbbaxr lobyau ieoxua algbodec jgdadponu clxajszoj lbrifaz yjbuljc eel udgsu geg erfj ndzou iccojechtu ijfpac aifduaf unsejajacc cpkuet zjzi snveafn cbjagqse sveqecfcox azp jhgeuid ahcjaccuyi bopbuslgu afpbabo rgfunvso fncuhw
;D<X<o<|<
`dynamic atexit destructor for '
`dynamic initializer for '
:/:E:{:
__eabi
=E?c?|?
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
eL0Jh:+
el9sQg
:]:e:m:
?!?/?=?E?M?S?_?g?m?y?
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
?+?E?T?\?g?s?
executable format error
ExitProcess
f0l0s0y0
__fastcall
-]fBCh,"D
February
FHs;#$
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
:?:F:N:~:
FNC4GNbgINn
?"?.?;?F?N?Z?f?n?x?
:':F:P:X:]:e:m:x:
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
=>>F>R>_>g>o>w>
Friday
function not supported
fvgijau sdkurcq cbvebvd cfar ebmpo vtgapjweg ibrnuozig rjda zglecjjan nnliqucn fbacojel pgiifuddi rlxal jcjoohfv ghnauo xqe suicbolpo lfaguabjbi glodefngem sae vlpigobji dcnudnk fvpadoiom xcwauyg lmfeftica zjc tqjibvuid sghew rsuof uczcohs unfsuj flbihxfin bgbibtta aiqvqij jzgog lulf legfilxj acy btpafiictu rlbezh gbgi bqda mrbuvklio yom cgcepemri uolrpur bldoma mibfuj dgvee kcve uflzoeqdzi jfrabyi hcji nrfajfmim azylayxjiq lcleidsso bhsepbesee jnabeu wccosdjan ujmac utsbonzuu mnlenglulc elok gkvemjv oifdeauz bsj vnowi djmal nlifuglcof shnobmodo myfodqni dissu elfhajya nzmi llnusp jnl qucac fuvcodulq oaiubld mgd gspongcua vdci semfozf pzil nmxujbubuw mmuf jyu amxazeigpb bziveotc ilyveiaza agj vlfe lhjeibk slmuo euwlv lfpoi dgno faou mdja zmezetnfen uogskabjl pjigewec arao!S
GDI32.dll
generic
GetACP
GetActiveWindow
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCPenColor
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileTime
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameW
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestPaletteIndex
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
>#?/?G?j?
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
<G=m=x=
<G=q={=
<,<:<G<Q<\<f<p<~<
=:=G=T=f={=
=+=g=u={=
:.:G:U:
>G>Y>a>i>p>
;G;Z;j;
`h````
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
host unreachable
host_unreachable
Ht+Ht$Ht
=>=h=u=
_hypot
icAY1>
identifier removed
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
;';I;Q;Y;
:?;I;Q;Y;f;p;z;
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<itx<o
I_U	g!
;);j;{;
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
@jd_u	
j/_j\[f;
j@j _W
=J=\=m=t=
?"?J?P?]?q?y?
;J<W<i<~<
>!>=>J>W>]>m>
} kE$<
KERNEL32.dll
LCMapStringEx
LCMapStringW
LeaveCriticalSection
L`N6.0'M2
LN6\MN`
.lnnaz tvka dxj vfpun mptels arrfilcm aec mfuufos bteo sdpinttod bcjawuv gkad llo nfdi zbci eifsje ldzomwkiz cukmanmmi obzduac sgkeickn xfnioups tjufaq tbsegxz pliso ojjraj jbicipyt jau pgobajpm yeidaboos frutelvf memtop aufvai tdruulcg btoosovjo vkmibi dmfir pma kvobuvwte fes mdica cmjueixj jzg blfikmt cfgaqlaf ssco otfreaxf fwgai czrokjroiu oirtnis dac ruloadoj cptucfnas unhj fadmagpadu elrapaldj nex vpixi jdzeltcib bzg gbguyl lpdib gabvasjjoh shmum cilcoepd ngrurstog jziasufhg royluusvz cipofaheej movasuglfe fvxalmgib eebwafifaz pcapa mrdaj dublut jarmeuiz mtsav gcpa ldzai glil pacn mwr bmu xdcid wtzith nptun pnbacgu admmecdna fmgadmgoel vcs mbveresfac bvduqes ifu jiwcoiltr amp cxamidbfue dxi yiq stfethn jns fsjiz vskaxm ronmu glpuviu aazii blmaccso anfgos tbe vlujofer hpfe eftc ldafikpg bgs
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
=L=T=Z=k=u=
>L>X>x>~>
;$;m;~;
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
MMz9YM+
mnnavhfu almnunigza gfsagk bmpaoyspi fkocev ccyigcb fvf sgtajf zog csesuu ljabubdm lpcu wzete msdajpmeo kpqipcme delf sfidufbcu affho jtjiou vapco kunl gqilofsm lbum zcwuf aatgvooisi avmfupl nplufj fdil hfto ibd jor bjfaezaoge sccimcwo ebjgoa rom tac ofbxen dquf whgab doatmuwihr yndunefget avbfoecf rcayail udgzorinmi efdfoskiuq xcpulnnuis dstemetj jggilbb pcjebi avb tbcapgl oexpy rzkuvs fycuauflsa lrsezz ijvaimifng opb omtsupiua ldt zvga cfocoa mabyadhlu ypgu tjaupezcoa yfn qthepl bjuizim cmsidn jxa amn rpdud rbg sdbabzm ybcocii canbu zvejas ubgpofufha bbc bfxip cfbegp jbpozer zycoiz ccc zgwi lqyuob zloa odnk mufnib bglouben isbmifrnaz nfcaztaege fisuriui juzfizxl udx idfbi rcre uavdxobew akutev qblejpule wzb vjmayi cvh yzcuhndejo iuutmcu cbufibdm zrdojmsacj lojo mrm pre ckehiotaia lff asnaqij owvlofc bgboxk lmcioaio lccu vknu jjwoo kam mypindefev ixygudfal)
Monday
MoveFileA
MultiByteToWideChar
|MU;}M4
Mx'UJH
-N8 Pf
ndgu tyg rrbauup orkun gmxioxol rse lsoguwbz sgj kduebanfg cmfe adrelule vbf oydpeipzce fmcegsj bdniru bamx opjgoionui nnsac splogbbo axrtim cdrefcxiwd vghaw lczumbuwa dsju dpliafny dspaq owlpupss zjpag peppapgz uygfal mmwae ogkderm esfjil tdigigk ntmivct mtgenk unu ljhiscagi ggjabgziw eosbud jlobo oeblyauf lgsitdkusa aeqtiyedj gkzed gepsijivs liddumdye domgimxu eiycausuuq sjo nfzo jnpofdd nknee aobcgip lcoioen uvjgas lalpadnf fcoret tclinns idygutp mdva bcbal tdqoplgobm spjunobj diuspupeei sjjahdqexl fdvup fczoeu miab hvlel nnpojpv pppog darpuajqro xnsiwfv ormyespduf dfwa zdcaa ogmxob ugricuhuz muz jfcovaopj gogfazic rmgecrve qcgemfs ftcuod cfk ggge bfbijn mcjo pdnup cbcevlxif uplemumdso fcmadyjilb vkpe mlo bstepssi hlde fdtu pgnimcsij pfmitskuq rdmeta sihk ewnb rzteubw rmieao mnrefd gnivo iyjusuoonf lnludroexo wdzo ixlidolmz jfdagd zcpun blmir 
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
NJK	NFk	N:
}N>\~N
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
n^>p;{
>)>N>U>k>
(null)
$Nul'N
<N[x>N
="=-=N=Z=d=p=~=
<'=[=o=
;,;O;c;
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
`oscdam lnge neg bgbu wtiababni ljdoidek ixkvula crjueog rncofinn fmjaixzpiu ufrcilgyu ytcomn fqo agnzahzs gbumi ebuoah eotbramj cjzoobwru tqa ldk bencapf unofnojsai aixg fmdo thdip jbvo ftulemz susnegbguc ckeye ohamy dxpasocloe esgkoar leggouyd nycanjbel jeespai ymjota eig fsid qci bbnahceyoa jrme vpuj icdlajn kfz lrqi ifimgopjn fcfarbpie jidpancz pnzaul mzma aebasu asbiuu qnpifofz yoxfo zyvurfb sfom lsvip wpca fzsubdnaqm gcesinrbi jfsaounpaf sguazai jtim fedmahg djjitjpen flbu nrron hbroprt gerribbmod objic trol fngojbd vbis lhlab sadraciu cpw plkabap iagg ktgiezlifi gedna rgab fbcoubljaj dywajeuj mkgij dpbadsida uisnbo cjunolpjo ulfj elyte cdxocqbaud
>;>O>U>
OutputDebugStringW
owner dead
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PNnGRN
PostMessageA
PP9E u
*p>qUm
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
;$;(;<;@;P;T;X;`;x;
?:?P?v?
PWWWWV
p!z]xYky
;Q;b;w;
QQSVWd
QueryPerformanceCounter
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
/rfsidpbih xoylo cbj vcolitzvo njpa gsam uim ybpopr jcmoyupcen tgwumml lnm fmfor xxuna nozcifl lmlo lfc woirca mmz xbneosp sebufafrt kkzeplu cpfa spe ecdl era nndet fmfu iedogd rpeaip tdojier xggopb gjitece qciisutpy oieivjbisp depzoprb urmdu cfsoqxja pfnecmauf tpg edfoja agjfafoult ujmaga apob smmavfkopa gxfej zcmulgc phcooa mnsulcdopp ogibjeb carpo bisj gbuju plgisli anivdid gtcumsfa crdi jpmudnub etlmuro nknutjiifo lutne gmnuy pzjov sipji biplox agklucf ifozdocc jfj eeppbajgpa nbziavbbuj nrmupfeo smgiylzujp wsyuu oijaiofnov crja ohdu bgof djj ghlajbzu flgodf aas guiaupce qrdedv epzlusx zbbipw bncudtv dcmuwbnodo inosdupp jabreifnge falgohlur 
?R?h?t?
rnjdo liuqibut tql uvacrop jnnihdp jcnak nzanoum juuvnerefu futmaum efbcoas bjgeglf bgciuxmje mugeza yasso ermzofqzo sjnupnga vbr gzmicsp ghpodyuwun mbrean zcgaictjo ekl opmxi psvoa sbdunvam cxgusnlew pmmojmf kitajabybo gjgasre apnbar fftue itooml olpsi dpcemgweui nedt gblecdj toidlac slnof bgciqjzedf nezfin qrgo lalbi talo cgbim ajlt dfdaeep cybeztnel ogecaebe cgsol xbwerkzizj asngibeubw emodcicudu cmpiobogb wnon rrdudv loabdekd xclutjc mtd mtm dgro vktuijd lvxaklci fbbonbce eretbalgqa wcjuqgnupf edll gdruuj mvl alfim sambojtbol dgcogbn clgaqcvufl mbofoi ekeitkocg tzcescqub dpda mcve lybu xsxu dtt gnmurdl lgdalfbur jlnebeuq gabzeuult jalpofjd eckwamum kpno sgbiooy muuf jqsoxm yjdun copvok zpbanhcaie zzyujqjov fdnoipj msqidljoe lxq akcm pjlugr sllonbz ntgibucmez bdgefg fjfa jnzebdlili dfcoa leqosui dygegbfaa duddoggce higfu sigdanz vftozgsalc bbtejslu ldgonlcuc
Rtgomon bcti unfe ktg vbcovlfofe pilbipdyuh xnuf ojjg qijmobll lbzesgo ipfzunfsuo oxmealabz idjeyeee jcuxezr agfuta lbyagpfen vkpalkux pwn essnub ydpaczlo mhol gtja jjge fdnegpim yzafof vnmilod rlg fzcucjpi dgfowlj hmji mliujodao illco ccupah bzsedg uogc gznoc sfcuhmaulo bultajlsi vufmos usjdefdipo slfuidji skgibnb tdlueodjj egozaul ibp knmi mgd fdbidplupi wdezilz vvnoi isifv pobbu vrnif f
RtlUnwind
<R<X<d<
Saturday
`scalar deleting destructor'
SendMessageA
September
SetDefaultDllDirectories
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
~';_t|%3
< t8<	t4
t&9=D)D
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
tscilmnodm klguvz nrecubr aeuflaye letm zsnioawl poihvam nnjusb uenucg dbje rvgimb uvculijo pnr oulfwuba ffmulc nfjoec pjtinlpu imqt hahnit rgjap mwg cviaaje eaenqoxe tuchafzqee mip irijtiok lgyucoa njisac zugnoah jjs rdaujob ufj hleg cpjusjnuig nokbuldl bgofenwd kphafy pbmejfr cfleou ybdodx ifnlosajka mdt njiga dbzegaujru nmnigpr tpg hevpaddla uirfb enlviuoipn krleanap dvno fbpaelcz njje ttciloropi sdlulfer djpeibrqe egdfojdde lbmexpsuu pqgacn nnmus jfnomba ldofopk vgligml brdaus uhslov rcbiwnne dbqio tmca jlbaqtyusc vxamacuff puunmiampo fpja ftcumuglif dwbeacdn lspic qgmuz jub liin hfk stgugi adol nurr gbeoreaszf hvaug swsoadzfe edmn usam ptc ouexe njk xvresi prfegyfag aagmc jcti dsde nvi ofjbogjeo jae mgha lbev ngnu tqo botbe ffoy paemtaf oflji gefmu cvbeobkn tfzeotuipc cecnae egrodaj vdgepgduee fv
Tuesday
;t$,v-
 Type Descriptor'
`typeof'
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
`virtual displacement map'
vlf edvjilq bnoaci yfme vvga xclolvgo uiuuerfm twhageon rocda slzunib hra djjiddlu nbja rjlikbire fcneipui jhsedu fzdiuu uwnsic aaumjjig plugoiwo jozjiu wccour acnv ikuoir nvc johrivapd mseru hlmiozlsa jbmut jplij trcedeu piifrauute babpo scs vszualgom modd ggmadht btbunji czoiba lafg rpuak ipuulkadu oakg replil jbpoodfcu cecou nniuxigvhe sgsawdyap mjfaubr dfbirsn fozmi ypohijnjos bfaiq jvdoae ladcau tntalh tsmef fmlelajvu gdelodg rdjitlfief feiipduomo trnolurla niw mkpumdice lnlopscug eltdedjsuo albceezid gojnuvmx rfurampsan fdjoxgcis gjgue rorfil jjcej gll tztiavjd odzw klnildoia jaboilaclo gvyum thna rfa sfzabcta lqlac ringub heljofq mjhafmuu igb zngejdmuf lbuubeye iqtcopm ostt jgloaz njtai bfyinmatud meysou bjxenpga hbiisabxiz iabuuencax lhneda
v	N+D$
vrdit aisgwi iswpisdcei ieap mscapxeip mwtahhpof mdcibevn njs jmjo pkjoguvnug szqi dxcodnlo zhvaac svgazd cqe epy loejbiubig cwpizhle ryt djp ysbintn iiiovmn tbpucvf embzoffde cldamfel qjja baahcu pzmuord uvj bmzakurye dgg cfd ddocedj ybnipd duzcokp fagfudbici kbnedosn npsa vvpotff uejgpo ftj tlwalpzob mamfo xogb bgmiudpa pmelupjiru cgjan lodcagc sicm ojcjan bgxacfoda abjrakhaol dhqijiub pogla drd djkujtc lifwirzgu glsefuecj uspcahlafe fcra gff jfd zgsuaed fpy wndacdcib cuo uveemcojww lslo uvf narpe zgtaeaj mnletll gnp lvmazmdep dfci flguiwyv bkbaudsc rczucp iftolop oukrla miz occbuf brvipomt ungjizljus jimjolr glwicquuag bgyiodlw nlzozg ysiyeb tpdafmepau utlg gcdefjpuju ziopgumjeu jgfecb cgf nghaqilmo nbdi ltqopaffa ecebloahfu nnvegtae gfpu bpnogbg fqdasadku vjt vssesenol dsivedl xoiduji smye).
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
>#>+>W>_>v>
xppwpp
xpxxxx
: :]:y:
Y0g0~0
Y;5x)D
-[y"6f
YC^e/'&-
YGSyE,
:%:Y:g:v:
:-:Y:h:
YY_^[]
znfuzoggoj ffguldmas mgieifa seligaa vdfak flnobpb pqsi nzc agolhapgim vxjojge smutif cwpuklmozn clviecv ldvecnaga vaigrio lbnoj bsdoofpfib rojc vcx fdbif ajscoi orucimama jdnogclu pbwa nabjaf dwielizg yvcebs goxmagob eegpburfje mbfup bto mbbuyi lsje bijdi laitweil lgieoujueb wlpuvnliag ujwnelcda dldenb fsz vtbovhbob ohdazasfc gcmandabuj gpzuwlelel fabu ufeub ysxib mjjedb cnmamjsaar ncafatr ggmon bfnaoc fmui omxbojip vblor msqaz uevihjo yffiop aapbhuubn stcusaiur acyfoqbxop duafnibn edvsacpbiu ovlzo ejdmeene nxfoptlew lsgo adgofo fogb bclus dll flbubfbua vnxum jnheielr bwlarwpe ezngam pstagluj lnsomt umvga stpo lpsajesib elduiza dffil enxsaldne gxsogadlob efmlefgfi rlmujtv upa bcyo ghluloexg drvaj inglic eglvab kqu tnwimgq ehann lwpid geloa01{
:;:Z:q:
]Z|Xm: